Designing Network Security Port Numbers● Security Technologies● Export Controls on Cryptography● Threats in an Enterprise Network● Considerations for a Site Security Policy● Design and Implementation of the Corporate Security Policy● Incident Handling● Securing the Corporate Network Infrastructure● Securing Internet Access● Securing Dial-In Access● Sources of Technical Information● Reporting and Prevention Guidelines: Industrial Espionage and Network Intrusions ● Basic Cryptography● Copyright 1989-2000 © Cisco Systems Inc. Designing Network Security http://wwwin.cisco.com/cpress/cc/td/cpress/internl/dns/index.htm [02/02/2001 17.31.50] March 1999 Welcome to Cisco Press Welcome to the employee only Cisco Press web site. The above "Welcome" page link presents a FAQ sheet for Cisco Press, including information about how you can buy Cisco Press books!. New information on the Cisco Press Marketing Incentive Plan is also now available. As source material becomes available from the publisher, the complete text of each Cisco Press publication will be presented here for use by Cisco employees. Sample chapters are presented at the public site hosted by Cisco. Design and Implementation Publications focusing on network design and implementation strategies. Internet Routing Architectures ISBN: 1-56205-652-2 By Bassam Halabi Explores the ins and outs of interdomain routing network designs. Designing Campus Networks ISBN: 1-57870-030-2 By Terri Quinn-Andry and Kitty Haller Focuses on designing scalable networks supporting campus LAN traffic. OSPF Network Design Solutions ISBN: 1-57870-046-9 By Thomas M. Thomas II Presents detailed, applied coverage of Open Shortest Path First protocol. Internetworking SNA with Cisco Routers ISBN: 1-57870-083-3 By George Sackett and Nancy Sackett Provides comprehesive coverage of terms, architectures, protocols, and implementations for internetworking SNA. Content not available. Residential Broadband ISBN: 1-57870-020-5 By George Abe Presents emerging high-bandwidth access network issues. Cisco Router Configuration ISBN: 1-57870-022-1 By Allan Leinwand and Bruce Pinsky Presents router deployment tips from long-time Cisco experts. Top-Down Network Design ISBN: 1-57870-069-8 By Priscilla Oppenheimer Learn a network design methodology based on standard techniques for structured systems analysis. Cisco Press Internal Home Page http://wwwin.cisco.com/cpress/home/home.htm (1 of 3) [02/02/2001 17.31.56] Cisco Career Certification and Training Publications developed in cooperation with Cisco Worldwide Training that support Cisco's Career Certification and customer training initiatives. Introduction to Cisco Router Configuration (ICRC) ISBN: 1-57870-076-0 Edited by Laura Chappell Based on the Cisco course, presents readers with the concepts and commands required to configure Cisco routers. Content not available. Cisco CCNA Preparation Library ISBN: 1-57870-125-2 By Cisco Systems, Inc. Bundle includes two publications: Introduction to Cisco Router Configuration and Internetworking Technologies Handbook, Second Edition (plus High-Performance Solutions for Desktop Connectivity in CD-ROM format). Content not available. Advanced Cisco Router Configuration (ACRC) ISBN: 1-57870-074-4 Edited by Laura Chappell Advanced guide focuses on scalable operation in large and/or growing multiprotocol internetworks. Cisco Certified Internetwork Expert (CCIE) Professional Development Series Publications supporting Cisco's CCIE program. Cisco CCIE Fundamentals: Network Design and Case Studies ISBN: 1-57870-066-3 By Cisco Staff Network design fundamentals and case examples assembled to help prepare CCIE candidates. CCIE Professional Development: Routing TCP/IP ISBN: 1-57870-041-8 By Jeff Doyle Covers basics through details of each IP routing protocol. Essential reading! Content not available. Networking Fundamentals Support publications providing technology and configuration basics. Internetworking Technologies Handbook (2nd Edition) ISBN: 1-56205-102-8 By Cisco Staff and Kevin Downes Survey of technologies and protocols. Internetworking Troubleshooting Handbook ISBN: 1-56205-024-8 By Cisco Staff and Kevin Downes Summarizes connectivity and performance problems, helps develop a strategy for isolating problems. Content not available. IP Routing Primer ISBN: 1-57870-108-2 By Robert Wright Technical tips and hints focusing on how Cisco routers implement IP functions. IP Routing Fundamentals ISBN: 1-57870-071-X By Mark Sportack Provides a detailed examination of routers and the common IP routing protocols. Cisco Press Internal Home Page http://wwwin.cisco.com/cpress/home/home.htm (2 of 3) [02/02/2001 17.31.56] Cisco Documentation from Cisco Press A number of Cisco IOS cross-platform software publications have been ported to a retail format by Cisco Press. Cisco Press is selling these documents via retail channels as a courtesy to simplify access for Cisco customers. All these documents, whether sold as Cisco product documents or as the Cisco Press publications, are available in electronic form via Cisco's free web-based,documentation site. To find publications offered by Cisco Press, please refer to the catalog of publications presented at the Cisco Press page hosted by Macmillan: Complete Cisco Press Publication Catalog● The links below direct you to the documents presented within the official Cisco documentation environment (and out of the Cisco Press web area). Cisco IOS Software Release 11.3 Documentation● Cisco IOS Software Release 12.0 Documentation● Copyright 1988-1999 © Cisco Systems, Inc. Cisco Press Internal Home Page http://wwwin.cisco.com/cpress/home/home.htm (3 of 3) [02/02/2001 17.31.56] Cisco Press Internal Designing Network Security Cisco Press title ● Developing IP Multicast Networks● Copyright 1989-2000 © Cisco Systems Inc. Cisco Press Internal http://wwwin.cisco.com/cpress/cc/td/cpress/internl/index.htm [02/02/2001 17.31.58] Developing IP Multicast Networks About the Author● Introduction to IP Multicast● Multicast Basics● Internet Group Management Protocol● Mutlimedia Multicast Applications● Distance Vector Multicast Routing Protocol● PIM Dense Mode● PIM Sparse Mode● Core-Based Trees● Multicast Open Shortest Path First● Using PIM Dense Mode● Using PIM Sparse Mode● PIM Rendezvous Points● Connecting to DVMRP Networks● Multicast over Campus Networks● Multicast over NBMA Networks● Multicast Traffic Engineering● Inter-Domain Multicast Routing● Introduction● Preface● Appendix A-PIM Packet Formats● Copyright 1989-2000 © Cisco Systems Inc. Developing IP Multicast Networks http://wwwin.cisco.com/cpress/cc/td/cpress/internl/ip_multi/index.htm [02/02/2001 17.31.59] Internetworking Terms and Acronyms Introduction● Numerics● A● B● C● D● E● F● G● H● I● J● K● L● M● N● O● P● Q● R● S● T● U● V● W● X● Internetworking Terms and Acronyms http://wwwin.cisco.com/cpress/cc/td/doc/cisintwk/ita/index.htm (1 of 2) [02/02/2001 17.32.00] Z● ITA New Terms October 2000● Copyright 1989-2000 © Cisco Systems Inc. Internetworking Terms and Acronyms http://wwwin.cisco.com/cpress/cc/td/doc/cisintwk/ita/index.htm (2 of 2) [02/02/2001 17.32.00] Cisco Press Search Enter your query here: Search Help Copyright 1989-1997 © Cisco Systems Inc. Cisco Press Search http://wwwin.cisco.com/cpress/home/search.htm [02/02/2001 17.32.02] Search Reset Search Cisco Connection Online Cisco Press Help User Interface Overview● Basic notes about the Cisco Press site user interface. Searching Cisco Press● Instructions regarding use of the multi-document search feature provided with this product. Copyright 1988-1997 © Cisco Systems Inc. Cisco Press Help http://wwwin.cisco.com/cpress/cc/lib/help.htm [02/02/2001 17.32.03] [...]... protocol over TLS/SSL (was spop3) socks 10 80/tcp SOCKS socks 10 80/udp SOCKS pptp 17 23/tcp PPTP pptp 17 23/udp PPTP radius 18 12/tcp RADIUS radius 18 12/udp RADIUS radius-acct 18 13/tcp RADIUS Accounting radius-acct 18 13/udp RADIUS Accounting http-alt 8080/tcp HTTP Alternate (see port 80) http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/appc.htm (3 of 4) [02/02/20 01 17.32.05] Port Numbers http-alt 8080/udp... that indicates the beginning or end of a frame The flag field consists of the binary sequence 011 111 10 Address A single byte that contains the binary sequence 11 111 111 , the standard broadcast address PPP does not assign individual station addresses Control A single byte that contains the binary sequence 00000 011 , which calls for transmission of user data in an unsequenced frame Protocol Two bytes that... established Four CHAP frame types exist, as shown in Figure 2 -10 Figure 2 -10 : PPP CHAP Frame Types Figure 2 -11 shows a scenario in which a branch router (the peer) is trying to authenticate to the NAS (the authenticator) http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm (10 of 50) [02/02/20 01 17.32.23] Security Technologies CHAP imposes network security by requiring that the peers share a plaintext... [02/02/20 01 17.32.05] Port Numbers http-alt 8080/udp HTTP Alternate (see port 80) continues Posted: Wed Jun 14 11 :28:58 PDT 2000 Copyright 19 89 - 2000 Cisco Systems Inc http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/appc.htm (4 of 4) [02/02/20 01 17.32.05] Security Technologies Table of Contents Security Technologies Identity Technologies Secure Passwords S/Key Password Protocol Token Password Authentication... (see Figure 2 -16 ) Figure 2 -16 : Kerberos Keys http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm (17 of 50) [02/02/20 01 17.32.24] Security Technologies When the client wants to create an association with a particular application server, the client uses the authentication request and response to first obtain a ticket and a session key from the KDC (see Figure 2 -17 ) Figure 2 -17 : Kerberos Authentication... Figure 2 -12 : PPP EAP Authentication PPP Authentication Summary PPP authentication is required for dial-in connectivity Any of the three standard mechanisms -PAP, CHAP, and EAP -can be used Table 2 -1 gives a summary of the strengths and weak-nesses of these mechanisms Table 2 -1: PPP Authentication Summary http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm (12 of 50) [02/02/20 01 17.32.23] Security. .. established, PPP provides for an optional authentication phase before proceeding to the network- layer protocol phase PPP Link Layer The PPP PDU uses the HDLC frame as stipulated in ISO 3309 -19 79 (and amended by ISO 3309 -19 84/PDAD1) http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm (7 of 50) [02/02/20 01 17.32.23] Security Technologies The PPP frame format is shown in Figure 2-6 The fields of a... Figure 2 -1 Figure 2 -1: The Initial S/Key Exchange The client then computes the one-time password, a process that involves three distinct steps: a preparatory step, a generation step, and an output function (see Figure 2-2) Figure 2-2: Computing the S/Key One-Time Password http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm (4 of 50) [02/02/20 01 17.32.23] Security Technologies 1 In the preparatory... Systems Security Initiative (MISSI) is a network security initiative, under the leadership of the National Security Agency (NSA) MISSI provides a framework for the development and evolution of interoperable, complementary security products to provide flexible, modular security for networked information systems across the Defense Information Infrastructure (DII) and the National http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm... National http://wwwin .cisco. com/cpress/cc/td/cpress/internl/dns/ch02.htm ( 21 of 50) [02/02/20 01 17.32.24] Security Technologies Information Infrastructure (NII) These MISSI building blocks share a common network security infrastructure and are based on common security protocols and standards Flexible solutions are tailored from these building blocks to meet a system's security requirements and may easily evolve, . Page http://wwwin .cisco. com/cpress/home/home.htm (3 of 3) [02/02/20 01 17. 31. 56] Cisco Press Internal Designing Network Security Cisco Press title ● Developing IP Multicast Networks● Copyright 19 89-2000 © Cisco. (and out of the Cisco Press web area). Cisco IOS Software Release 11 .3 Documentation● Cisco IOS Software Release 12 .0 Documentation● Copyright 19 88 -19 99 © Cisco Systems, Inc. Cisco Press Internal. routing protocols. Cisco Press Internal Home Page http://wwwin .cisco. com/cpress/home/home.htm (2 of 3) [02/02/20 01 17. 31. 56] Cisco Documentation from Cisco Press A number of Cisco IOS cross-platform